FROM apache/nifi:1.25.0
USER root

RUN mkdir -p /usr/local/share/ca-certificates/Yandex && wget "https://storage.yandexcloud.net/cloud-certs/CA.pem" -O /usr/local/share/ca-certificates/Yandex/YandexCA.crt
RUN keytool -import -trustcacerts -noprompt -storepass changeit -file /usr/local/share/ca-certificates/Yandex/YandexCA.crt -alias CA_ALIAS -keystore $(dirname $(dirname $(readlink -f $(which java))))/lib/security/cacerts
